Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: n5F2jQcLXDVuv/6k8Qc42AAWBbKVZxWTnRDVg6+uTzE=
Subject key identifier: EB:3F:7E:3B:1F:67:6E:C8:7B:94:9F:E3:2B:1C:32:83:E4:6C:6A:F7
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 01964D7F05C1CFE4C93B1811427CDFF2B51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0CF9
Signing time: Sat 19 Apr 2025 10:01:32 +0000
Manifest this update: Sat 19 Apr 2025 10:01:32 +0000
Manifest next update: Sun 20 Apr 2025 10:01:32 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: Ai6/f2xNtt+jIcd+PPUj4O1TAQUKqFg6TXFb5SO6H1g=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7f:05:c1:cf:e4:c9:3b:18:11:42:7c:df:f2:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Apr 19 10:01:32 2025 GMT
Not After : Apr 20 10:01:32 2025 GMT
Subject: CN=eb3f7e3b1f676ec87b949fe32b1c3283e46c6af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:b9:1b:6a:8b:68:c4:40:99:2f:07:55:50:
b8:7e:aa:b4:2c:60:6c:8c:4d:3c:de:ff:44:89:e8:
2f:eb:5a:1a:5d:c1:f3:25:6e:b7:f2:b4:60:17:f6:
8d:a7:93:23:22:12:81:c7:c4:d8:2c:59:57:c1:67:
c8:79:ba:a7:16:60:23:8e:f2:14:fa:91:dd:80:c9:
09:c0:e8:4d:bc:12:51:7d:87:92:91:dc:72:4b:b1:
09:ba:70:cc:b3:38:72:c6:8a:84:a4:0e:fc:4f:95:
52:07:46:34:13:e7:2e:60:77:d4:86:1e:b3:3c:93:
d2:01:da:3b:59:e1:69:b5:95:84:26:ae:1b:2f:c8:
dc:d2:5c:db:6c:36:29:58:5b:65:14:ce:2d:da:33:
75:41:b5:42:e4:58:f4:bf:c5:f0:1d:d8:3e:39:5b:
de:aa:65:c3:b4:47:29:70:db:3d:66:61:58:35:24:
bd:47:17:e8:c9:30:ff:f0:16:4a:e6:37:cc:08:9e:
11:50:91:eb:2a:04:14:a3:5a:6f:da:52:ff:53:81:
bb:96:4f:bc:9c:30:c3:21:bb:19:cd:00:48:b0:9c:
5c:85:fb:5b:90:01:10:94:0c:ef:5a:76:44:21:17:
2e:08:0a:f9:3d:84:3a:54:47:84:22:e6:aa:25:9b:
0d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3F:7E:3B:1F:67:6E:C8:7B:94:9F:E3:2B:1C:32:83:E4:6C:6A:F7
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:52:fa:57:5b:dd:14:79:f3:18:bd:62:b4:15:2c:b4:97:cd:
a2:47:79:19:fb:e0:9b:56:27:f5:2e:a0:8f:b5:cd:e9:90:2a:
87:e5:35:f1:77:5f:60:1b:06:b4:29:9f:57:99:0d:5b:41:d2:
b6:f5:cd:bd:83:28:48:99:51:6c:77:88:17:60:d7:2b:b0:aa:
36:e7:8c:77:f3:d9:75:7e:c8:62:5f:30:00:5b:00:09:fb:b9:
3c:c1:5c:bf:5a:47:b8:ab:bf:39:79:b4:87:69:f1:b9:34:a0:
7d:a1:67:c3:fb:b4:2d:c2:d8:35:ed:b9:6a:a1:c0:54:2b:0f:
b0:21:2f:e3:61:8f:05:85:29:fa:8c:e6:d4:84:1a:b8:2f:43:
77:a0:74:f3:74:04:44:be:69:bb:b3:c5:d9:c6:74:30:ce:7c:
33:c7:cc:0b:69:67:76:aa:ca:d6:02:21:e1:97:32:6e:74:bb:
6f:74:f7:be:13:af:65:58:d1:da:8b:4f:87:f2:51:b2:9e:99:
a3:da:92:d4:9d:25:a0:ca:f5:eb:d8:5e:c4:fc:ce:72:44:e9:
66:0e:83:ec:0d:04:00:60:43:2f:d9:44:27:1d:16:11:63:61:
dd:1d:27:d3:cd:18:e5:66:b7:8a:83:ee:3e:cf:5b:80:68:b8:
2e:16:d5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:45:55 2025 by rpki-client